Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2967EF4A73711EF9B425388762E951A.roa
File: B2967EF4A73711EF9B425388762E951A.roa (raw, json)
Hash identifier: SPoRDOacM3y7gLLFiEMD2ERRajynsrqFbvCBFhGzBPU=
Subject key identifier: D2:A4:6A:96:6C:4A:97:C2:FB:21:A5:28:21:12:10:D8:5A:05:7B:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2967EF4A73711EF9B425388762E951A.roa
Signing time: Wed 20 Nov 2024 12:05:13 +0000
ROA not before: Wed 20 Nov 2024 12:05:10 +0000
ROA not after: Tue 24 Dec 2024 12:05:10 +0000
asID: 152711
IP address blocks: 45.202.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54783 (0xd5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 12:05:10 2024 GMT
Not After : Dec 24 12:05:10 2024 GMT
Subject: CN=673dd079-e9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:73:d0:2b:7c:77:f4:0c:00:12:ff:ce:c7:
e3:0f:4d:05:f1:59:33:1d:bf:34:8f:9b:f2:9d:ca:
d1:c3:38:78:31:6e:a7:2a:47:de:e5:68:31:2f:c7:
ea:da:a4:c4:ee:03:9d:73:12:74:e8:7d:c3:3b:eb:
61:7a:98:55:17:b6:0c:91:77:73:30:39:a5:0d:29:
7f:18:fa:a7:b5:21:22:11:7b:d8:4c:f3:9d:27:c2:
eb:7e:33:6d:10:fc:a9:d1:fd:48:c0:44:fb:1f:9d:
8c:4d:b2:61:d6:db:3e:26:b5:97:ec:49:7c:02:f7:
39:dd:be:40:1b:79:40:0f:07:da:18:32:1b:19:0e:
e8:96:51:75:a5:c3:0a:0b:32:4e:5e:50:e8:4a:e3:
4a:78:b1:58:d7:29:0d:36:e6:59:b5:63:3e:72:fd:
27:18:c5:9b:10:33:e1:1a:1f:82:ef:87:89:c1:dd:
8b:59:43:96:18:38:c4:fb:69:c0:80:aa:3e:57:c9:
ae:fc:f8:da:98:bb:f1:d0:0d:1d:d0:5c:5f:57:5d:
04:fd:0f:5b:e2:b4:03:2e:1b:86:09:be:de:7a:87:
7e:4f:45:0d:b7:dc:5b:bc:82:f0:1e:af:92:95:83:
d5:ee:d3:6d:49:66:46:dc:66:91:46:65:82:f7:5c:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A4:6A:96:6C:4A:97:C2:FB:21:A5:28:21:12:10:D8:5A:05:7B:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2967EF4A73711EF9B425388762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.212.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1f:49:16:36:4c:37:70:b2:2d:1e:c7:65:41:75:bc:f1:92:
1f:32:80:38:78:c4:22:21:79:e5:57:25:04:ce:8f:f1:e6:59:
23:1b:b5:0e:fd:f2:7b:af:96:60:a9:97:5d:90:24:ad:e9:27:
4d:58:2d:a7:e1:64:2c:a4:6f:49:36:76:d7:2f:25:ca:67:af:
42:bd:9a:41:ab:db:58:2e:d3:e3:13:1f:e8:ae:b6:e6:06:20:
a5:6c:49:d0:6a:bc:d0:9d:76:8f:35:17:06:77:56:99:97:93:
e9:3c:c7:43:2a:9a:8c:2e:ff:dd:5c:67:82:b2:56:35:7b:dd:
18:20:b3:72:27:33:08:ca:43:04:f6:b2:7b:cc:69:29:d6:9e:
73:7a:89:72:00:28:28:5f:bb:b1:3f:43:56:95:c0:0c:81:6a:
b7:3a:e5:9c:e4:c2:9f:d0:14:3b:c1:57:07:68:02:a6:33:93:
8d:bc:4d:b1:f6:55:a2:62:91:1c:94:4a:b0:b9:29:5d:99:d5:
6c:b6:43:5e:15:13:c9:a1:96:5c:5b:9c:20:98:c4:74:4f:85:
b2:a9:20:dd:cf:00:f7:86:81:db:78:f4:c9:d4:0a:2c:c1:e9:
6a:01:54:4b:cc:9a:39:83:e6:33:8e:be:ba:eb:b9:c7:dc:4c:
13:ef:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:45 2024 by rpki-client on console-ams.rpki-client.org